$ rpki-client -vvf repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft File: 9F1E176A521C3CEFE1D787F898211547A2D65955.mft (raw, json) Hash identifier: VAooxr4eg1/43t3L30CXkaq+7IYeFgvzXXzbjF6t6Bk= Subject key identifier: 24:07:2B:B8:E9:73:87:D4:06:31:2B:5F:F1:DA:42:21:0D:6F:63:39 Authority key identifier: 9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 Certificate issuer: /CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Certificate serial: 1E5FDB0AE6C55CD6E2F6AC6D5844E364C0720309 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject info access: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft Manifest number: 0109 Signing time: Tue 03 Jun 2025 01:42:32 +0000 Manifest this update: Tue 03 Jun 2025 01:37:32 +0000 Manifest next update: Fri 06 Jun 2025 03:13:32 +0000 Files and hashes: 1: 3130332e37382e3233342e302f32342d3234203d3e203634333032.roa (hash: 3xpIJX5oINXJUPuBkhUbqHuDByu9ZULCKQ7tzsRwqDk=) 2: 3130332e37382e3233332e302f32342d3234203d3e203634333032.roa (hash: 7vbMiozb3uHTPyIGLruw8yBs7XhAiHnr0tqrwOMZY8w=) 3: 3130332e37382e3233322e302f32322d3232203d3e203634333032.roa (hash: pe62LiojXyM7gYicjmgnqk2m0Gdqr7TylPQuh7SdFnU=) 4: 9F1E176A521C3CEFE1D787F898211547A2D65955.crl (hash: I3lOY+y7AHpH8NIxhF6O0MXl3mrdn2Wmj921OPHxZoY=) 5: 323030313a6466363a356130303a3a2f34382d3438203d3e203634333032.roa (hash: 7c1sfMcrfO93nFfMchi4QHV2HKxCNeAUSMnzGqAyt9Q=) 6: 3130332e37382e3233322e302f32342d3234203d3e203634333032.roa (hash: aKEsgE6H2Q6MjQcVkyp/z8tGgi8bnF/5scXJTaxQ5O4=) 7: 3130332e37382e3233352e302f32342d3234203d3e203634333032.roa (hash: NbBYk657nhFcWyfIb4SK1Hr5N01903qmNQrNmHuRDKc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 03:13:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:5f:db:0a:e6:c5:5c:d6:e2:f6:ac:6d:58:44:e3:64:c0:72:03:09 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9F1E176A521C3CEFE1D787F898211547A2D65955 Validity Not Before: Jun 3 01:37:32 2025 GMT Not After : Jun 6 03:13:32 2025 GMT Subject: CN=24072BB8E97387D406312B5FF1DA42210D6F6339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:df:5f:a6:4c:f9:e8:92:02:69:2e:24:bf:fc: 3c:86:84:2e:b7:4f:96:21:3d:c3:32:34:24:ad:e9: ce:40:e3:87:ab:79:57:90:35:53:94:e9:f8:42:f1: 75:8a:ef:a7:31:9b:71:8c:f7:3c:17:e5:02:52:d2: 10:b9:a5:cd:3f:cc:df:47:f5:c3:8c:9b:28:0d:90: 17:ed:d5:e5:8a:1d:97:8e:7d:8f:7e:30:dc:ea:cc: 3f:2e:cd:bc:81:e4:2a:56:29:a7:60:7d:72:39:91: b5:be:75:30:d3:8d:e3:68:2f:f1:d1:55:26:90:24: 3a:d0:cc:42:19:ac:42:81:c7:9d:ec:ad:81:62:3d: 0d:88:b3:5e:2b:fd:6a:ca:54:06:27:be:7b:9f:ed: cc:0d:f1:8f:d0:18:21:4e:54:ca:09:a6:e3:2d:ab: 41:64:fd:af:2a:ed:84:84:08:91:f6:d5:fa:9f:7a: ff:9f:cb:9f:40:63:45:f1:c0:23:e3:17:cb:92:fd: 5b:d2:b6:ba:37:73:bb:56:58:bf:59:61:a2:c4:8a: 6c:0a:88:f0:f8:02:db:26:77:12:21:39:82:16:d1: c9:fe:ee:86:39:3f:d1:b7:af:a5:af:61:d1:b0:54: e9:e8:1e:c5:73:b8:bf:95:25:58:94:b6:27:c0:c5: 11:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:07:2B:B8:E9:73:87:D4:06:31:2B:5F:F1:DA:42:21:0D:6F:63:39 X509v3 Authority Key Identifier: keyid:9F:1E:17:6A:52:1C:3C:EF:E1:D7:87:F8:98:21:15:47:A2:D6:59:55 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F1E176A521C3CEFE1D787F898211547A2D65955.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/edde8fb8-3a77-487e-9dfc-f479d6b33809/0/9F1E176A521C3CEFE1D787F898211547A2D65955.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:6f:9e:26:c9:e8:20:a9:32:c8:ed:68:ad:87:4c:88:a4:cb: 80:de:bc:fd:3d:ad:a0:19:c7:05:ae:1a:6b:ce:39:9f:1a:68: 1c:2d:a1:c1:77:cc:6a:78:7a:8e:53:eb:e7:c5:63:b1:cc:c3: 71:d0:b8:b2:20:e2:e3:c6:74:ff:4f:80:07:8b:f6:bf:3a:b7: e5:24:ad:09:fe:e0:d9:b6:97:68:3e:57:c2:95:25:1f:44:fa: f0:8b:0b:52:26:29:d2:bc:a0:09:53:4c:7d:07:3b:ac:e4:e6: 09:ac:b7:d6:07:b0:74:f4:ec:8e:8b:93:cd:02:ff:23:ad:55: ef:45:2a:dd:dc:f0:14:38:61:58:9c:9d:08:eb:db:aa:df:76: c2:f0:10:19:e8:d8:af:31:0a:80:08:fe:a0:b6:1d:cf:cb:8e: f0:fd:6e:da:6b:b6:fe:1c:bb:fe:c0:cd:93:06:16:6d:9c:b7: 55:b5:17:7e:b1:43:66:e1:e3:98:69:35:44:69:12:cc:9a:22: a5:8c:42:80:ae:87:12:f2:f7:3e:c4:6b:3d:00:e0:7f:b3:54: 91:28:ee:99:91:56:9a:67:90:be:83:0a:e9:a0:6b:57:7f:80: b4:c6:28:12:cb:25:ae:e1:64:8e:a0:89:04:e9:2b:c1:ef:21: 22:1d:c1:af -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHl/bCubFXNbi9qxtWETjZMByAwkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdB MkQ2NTk1NTAeFw0yNTA2MDMwMTM3MzJaFw0yNTA2MDYwMzEzMzJaMDMxMTAvBgNV BAMTKDI0MDcyQkI4RTk3Mzg3RDQwNjMxMkI1RkYxREE0MjIxMEQ2RjYzMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL31+mTPnokgJpLiS//DyGhC63 T5YhPcMyNCSt6c5A44ereVeQNVOU6fhC8XWK76cxm3GM9zwX5QJS0hC5pc0/zN9H 9cOMmygNkBft1eWKHZeOfY9+MNzqzD8uzbyB5CpWKadgfXI5kbW+dTDTjeNoL/HR VSaQJDrQzEIZrEKBx53srYFiPQ2Is14r/WrKVAYnvnuf7cwN8Y/QGCFOVMoJpuMt q0Fk/a8q7YSECJH21fqfev+fy59AY0XxwCPjF8uS/VvStro3c7tWWL9ZYaLEimwK iPD4AtsmdxIhOYIW0cn+7oY5P9G3r6WvYdGwVOnoHsVzuL+VJViUtifAxRFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAcruOlzh9QGMStf8dpCIQ1vYzkwHwYDVR0j BBgwFoAUnx4XalIcPO/h14f4mCEVR6LWWVUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l ZGRlOGZiOC0zYTc3LTQ4N2UtOWRmYy1mNDc5ZDZiMzM4MDkvMC85RjFFMTc2QTUy MUMzQ0VGRTFENzg3Rjg5ODIxMTU0N0EyRDY1OTU1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1NDdBMkQ2 NTk1NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWRkZThmYjgtM2E3Ny00ODdlLTlk ZmMtZjQ3OWQ2YjMzODA5LzAvOUYxRTE3NkE1MjFDM0NFRkUxRDc4N0Y4OTgyMTE1 NDdBMkQ2NTk1NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFtvnibJ6CCpMsjtaK2HTIiky4DevP09raAZ xwWuGmvOOZ8aaBwtocF3zGp4eo5T6+fFY7HMw3HQuLIg4uPGdP9PgAeL9r86t+Uk rQn+4Nm2l2g+V8KVJR9E+vCLC1ImKdK8oAlTTH0HO6zk5gmst9YHsHT07I6Lk80C /yOtVe9FKt3c8BQ4YVicnQjr26rfdsLwEBno2K8xCoAI/qC2Hc/LjvD9btprtv4c u/7AzZMGFm2ct1W1F36xQ2bh45hpNURpEsyaIqWMQoCuhxLy9z7Eaz0A4H+zVJEo 7pmRVppnkL6DCumga1d/gLTGKBLLJa7hZI6giQTpK8HvISIdwa8= -----END CERTIFICATE-----Generated at Tue Jun 3 23:19:29 2025 by rpki-client